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(54) Vehicle usage control and security apparatus 

(57) A control unit (10) for controlling the usage of 
apparatus over a time period (62) is configured to re- 
ceive a validation device (12) programmable with pro- 
grammable parameters, including a validation code and 
a time parameter. The control unit (10) is operable to 
respond to the validation code (61 ) to validate the vali- 
dation device (1 3) for enabling operation of the appara- 
tus and to respond to the time parameter of the valida- 
tion device (12) to cause disabling of the apparatus at 
a time determined by the time parameter The invention 
finds particular application to the control of a vehicle (20) 
during a rental period (70), the control unit (10) being 
responsive to a time parameter to immobilise the vehicle 
(20) following the end of the rental period (70). A grace 
period (72) following the end of the rental period (70) 
may also be programmed into the validation device (12). 
For safety reasons, the immobilisation of the vehicle 
(20) is prevented while the vehicle (12) is operating, but 
restarting of the vehicle (20) is prevented on the first and 
subsequent occasions following the expiry of the appro- 
priate time period (62). Additional parameters may be 
programmed into the validation device (12), which can 
be in the form of a chip card (12) or other recordable 
medium 
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Description 

[0001] The present invention relates to the control of 
vehicle usage. The invention finds particular application 
to the rental of vehicles and for controlling the usage of 
rental vehicles. 

[0002] A constant source of problems for vehicle rent- 
al companies is the failure of persons renting vehicles 
promptly to return those vehicles at the end of a rental 
contract. The failure to return the vehicle can be as a 
result of the person renting the vehicle simply continuing 
to use the vehicle beyond the end of the period of the 
rental contract. Alternatively, this may be as a result of 
the theft of the vehicle by the vehicle renter, or by a third 
party. 

[0003] An aim of the present invention is to improve 
the control of the rental of rented goods such as motor 
vehicles. 

SUMMARY OF THE INVENTION 

[0004] Particular and preferred aspects of the inven- 
tion are set out in the accompanying independent and 
dependent claims. Combinations of features from the 
dependent claims may be combined with features of the 
independent claims as appropriate and not merely as 
explicitly set out in the claims. 

[0005] In accordance with a first aspect of the inven- 
tion, there is provided a vehicle usage control apparatus 
comprising a control unit connectable to operating com- 
ponents of the vehicle, the control unit being configured 
to receive a validation device programmable with pro- 
grammable parameters including at least one validation 
code and at least one time parameter, the control unit 
being operable to respond to the validation code to val- 
idate the validation device for enabling operation of the 
vehicle and to respond to the time parameter of the val- 
idation device to cause disablement or immobilisation 
of the vehicle at a time determined by the time param- 
eter. 

[0006] In order to be able to operate the vehicle, it is 
therefore necessary for the user to be in possession of 
a valid validation device and for the programmed time 
parameter(s) to indicate that vehicle usage is permitted. 
A time parameter could be programmed as a termina- 
tion time, or as a duration from a starting time, as de- 
sired. A validation code and a time parameter could be 
programmed from a computer by, for example a vehicle 
rental office, prior to handing over the vehicle to the user. 
One or more validation codes and one or more time pa- 
rameters may be provided. 

[0007] Where the time parameter defines the end of 
a rental period, whether in terms of a duration from a 
start time or in terms of an end time, the control unit can 
be responsive to the time parameter to immobilise the 
vehicle following the end of the rental period. 
[0008] In order to avoid immobilisation of a vehicle 
when it is actually being driven, which could be danger- 
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ous, the control unit can be operable to immobilise the 
vehicle at the first attempt to start the vehicle following 
the end of the of the rental period. 
[0009] Immobilisation could also be effected following 
s a grace period after the end of the rental period. The 
duration of the grace period could be determined by a 
grace period parameter programmed on the validation 
device, with the control unit being operable to read the 
grace period parameter from the validation device. 
[0010] During the grace period, and/or possibly during 
a period prior to expiry of the rental period, the control 
unit can be operable to warn a user of the impending 
expiry of a time period and of the impending immobili- 
sation of the vehicle. 

[0011] The control unit can be operable at the time 
determined by the time parameter to invalidate a valida- 
tion device received by the control unit by overwriting 
the validation code of the validation device, whereby the 
vehicle cannot be restarted. 

[0012] The control unit can also be operable to acti- 
vate an alarm device at a time determined by the time 
parameter. The operation of an alarm device can be par- 
ticularly effective where the failure to return the vehicle 
at the end of the rental period is as a result of theft of 
the vehicle. It can also serve so to embarrass the renter 
of the vehicle as to cause him or her to cease further 
use of the vehicle. The alarm device could comprise an 
audible and/or visible alarm device. Alternatively, or in 
addition, the alarm device could comprises a radio lo- 
cation beacon to facilitate location of the vehicle by the 
rental company. 

[0013] Preferably, the control unit is configured as an 
add-on device mountable in a vehicle and connectable 
to the vehicle systems. Alternatively, the control device 
could be integrated into the vehicle systems. 
[0014] The control unit could be connectable to a 
starter of a vehicle for enabling and disabling operation 
of the vehicle by respectively enabling and disabling the 
starter. 

[0015] The control unit could additionally, or alterna- 
tively, be connectable to the ignition system or a fuel 
pump of a vehicle for enabling and disabling operation 
of the vehicle by respectively enabling and disabling the 
ignition system and/or a fuel pump of the vehicle. 
[0016] In a preferred embodiment the control unit is 
configured to receive a validation device in the form of 
a chip card and comprises means for reading a chip 
card. A chip card (also known as a smart card or IC card 
or chip card) enables the storage of parameters, with 
control logic as required, in recordable media on a card. 
[0017] The control unit can be operable to record us- 
age parameters on the validation device. For example, 
the usage parameters could include one or more of dis- 
tance driven, maximum speed and journey time param- 
eters. 

[0018] The invention also provides for the combina- 
tion of a control unit and a validation device. The vali- 
dation device comprises a recordable medium and is 
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preferably configured as a chip card. The validation de- 
vice can optionally be programmable with additional 
programmed parameters, such as one or more of vehi- 
cle ownership, current user, usage contract, user pref- 
erence parameters and pulse duty cycles for audible 
and visual indicators. 

[0019] A validation device for vehicle usage control 
apparatus as described above can hold at least a vali- 
dation code and a time parameter readable by the con- 
trol unit. 

[0020] According to another aspect of the invention, 
there is provided a control unit connectable to operating 
components of an apparatus for controlling usage of that 
apparatus, the control unit being configured to receive 
a validation device programmable with programmable 
parameters including a validation code and a time pa- 
rameter, the control unit being operable to respond to 
the validation code to validate the validation device for 
enabling operation of the apparatus and to respond to 
the time parameter of the validation device to cause dis- 
abling of the apparatus at a time determined by the time 
parameter. 

[0021] According to a further aspect of the invention, 
there is provided a method of controlling the usage of a 
rental vehicle, comprising: 

initially programming a validation device with at 
least a validation code and a time parameter and 
associating the validation device with a vehicle us- 
age control unit; 

and then the control unit reading the validation code 
and the time parameter from the validation device, 
enabling operation of the vehicle where the valida- 
tion code is valid, and subsequently disabling oper- 
ation of the vehicle at a time dependent upon the 
time parameter. 

[0022] In an embodiment of the invention, the disa- 
bling of the vehicle can be achieved as a result of the 
control unit cancelling the validation code. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0023] Exemplary embodiments of the present inven- 
tion will be described hereinafter, by way of example on- 
ly, with reference to the accompanying drawings in 
which like reference signs relate to like elements and in 
which: 

Figure 1 provides an overview for explaining the op- 
eration of an embodiment of the present invention; 

Figure 2 is an exemplary implementation of an em- 
bodiment of the present invention; 

Figure 3 illustrates aspects of the implementation 
of Figure 2 in more detail; 
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Figure 4 is a schematic representation of a control 
unit for an embodiment of the present invention; 

Figure 5 illustrates data stored in a memory com- 
5 ponent of a chip card for an embodiment of the 
present invention; 

Figure 6 illustrates the comparison of time values in 
an embodiment of the present invention; and 

10 

Figure 7 is a flow diagram illustrating the operation 
of an embodiment of the present invention. 

DESCRIPTION OF THE PREFERRED 
IB EMBODIMENTS 

[0024] An exemplary embodiment of the present in- 
vention will be described hereinafter, by way of example 
only. An embodiment of the present invention relates to 

20 vehicle usage control apparatus for controlling the use 
of a vehicle. The apparatus provides a control unit which 
is mountable or integratable within a vehicle and co-op- 
erates with a validation device in order to enable usage 
of the vehicle under controlled conditions. 

25 [0025] Figure 1 schematically illustrates a possible 
external configuration of a control unit 10 in combination 
with a validation device 1 2 in the form of a chip card, or 
smart card, comprising an electronic chip 14 within a 
standard sized chip card. Also illustrated in Figure 1 is 

30 a personal computer 16, which can be configured to in- 
clude a chip card writer for writing information to the chip 
14 on the chip card 12 and optionally for reading infor- 
mation from the chip card 12. As shown in Figure 1 , the 
control unit 10 comprises a housing 17, with a chip card 

35 receiving slot 18 for receiving the chip card 12 and a 
light emitting diode 19 for indicating operating states of 
the unit 10. 

[0026] Figure 2 is a schematic representation of the 
installation of the control unit 10 under the dashboard 

40 21 of a vehicle 20. Also illustrated in Figure 2 is an igni- 
tion key mounted in an ignition switch 22 adjacent to the 
steering column of the vehicle 20. 
[0027] When installed within a vehicle, the control unit 
10 is connected to various systems of the vehicle. Thus, 

^5 for example, as illustrated in Figure 3, the control unit 
10 can be connected to the ignition switch 22 for selec- 
tively enabling or disabling operation of the ignition 
switch 22. Alternatively, or in addition, the control unit 
10 can be connected to an ignition circuit 24 for selec- 

50 tively enabling or disabling operation of the ignition cir- 
cuit 24 for providing ignition signals to the engine 26 of 
the vehicle 20. Alternatively, or in addition, the control 
unit 10 can be controlled to a starter circuit 28 for selec- 
tively enabling or disabling the operation of the starter 

55 circuit 28 within the vehicle 20. Through the selective 
control of the ignition switch 22, and/or the ignition circuit 
24, and/or the starter circuit 28 and/or other control de- 
vices within the vehicle, for example a fuel pump (not 
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shown), the control unit 10 can be used selectively to 
enable operation of the vehicle and/or to disable oper- 
ation of the vehicle thereby providing selective immobi- 
lisation of the vehicle. 

[0028] The control unit 10 can additionally be con- 
nected to various alarm and signalling devices forming 
part of or located within the vehicle. Thus, for example, 
the control unit 10 can be connected to an audible alarm, 
such as the horn of the vehicle, or alternatively a sepa- 
rate alarm sounder (not shown). Alternatively, or in ad- 
dition, the control unit 10 can be connected to lighting 
circuits 32 of the vehicle for selectively causing lights 34 
of the vehicle to be illuminated. The lights 34 could com- 
prise indicator and/or hazard warning lights and/or park- 
ing and/or driving lights. Alternatively, or in addition, the 
control unit 10 can be connected to a radio beacon de- 
vice 36 for emitting a radio location signal 38 for enabling 
location of the vehicle 20. 

[0029] The control unit 1 0 can be configured as a sep- 
arate device which can be added to a vehicle and be 
connected to the vehicle systems. Alternatively, the con- 
trol unit 10 could be formed as an integral component 
within the vehicle 20. 

[0030] Figure 4 is a schematic overview of an exem- 
plary configuration of the control unit 1 0. The control unit 
10 as illustrated in Figure 4 comprises a microprocessor 
based unit implemented on one or more circuit boards 
within the housing 1 7 of the control unit 1 0. A card reader 
40 is aligned with the receiving slot 18 for receiving a 
chip card 12 and for reading from and/or writing to the 
chip 1 4 on the card 1 2. The card reader 40 is connected 
via a bus 54 to other components within the control unit 
10. Also connected to the bus 54 is a microprocessor 
42 operable in response to control code contained within 
a memory 44. The memory 44 can comprise read only 
and/or random access memory for the storage of pre- 
programmed control data and/or programmable data. 
[0031] Indeed, in a typical embodiment, the memory 
44 will comprise read only memory for pre-programmed 
information and programmable memory for variable in- 
formation. 

[0032] Also connected to the bus 54 is a device inter- 
face 46 which is connected to various devices external 
to the control unit as, for example, illustrated in Figure 
3. In the particular example illustrated, it is assumed that 
discrete connections are provided to the individual com- 
ponents, such as is illustrated in Figure 3. However, de- 
pending on the particular configuration of the vehicle, 
this may be varied. For example, if the car comprises 
components which are connected via a bus, rather than 
conventional wiring looms, then the device interface 
could provide an interface to that bus and could use the 
appropriate messaging protocol of the bus for commu- 
nicating with the various vehicle devices. 
[0033] Also shown connected to the bus 54 are one 
or more display devices 48. These could comprise one 
or more LEDs (e.g., LED 19 illustrated in Figure 1), but 
could also comprise alphanumeric and/or other display 



devices. Also, as an alternative, or in addition, a sepa- 
rate display device could be provided in a separate dis- 
play unit (not shown) within the view of the driver of the 
vehicle for displaying messages to the driver of the ve- 
5 hide. 

[0034] Also shown in Figure 4 is an audio interlace 50 
connected to the bus 54. This in turn is connected to a 
loudspeaker for playing audio messages and/or audible 
warning tones. As an alternative to providing an internal 

io loudspeaker 52, the audio interface could be connected 
to the audio system of the vehicle for using the audio 
system of the vehicle to play audio messages and/or 
warning tones to the driver of the vehicle. 
[0035] In operation of the apparatus as shown in Fig- 

is ures 1 - 4, various data are programmed into the mem- 
ory of the chip 14 by the personal computer 16, which 
data form programmable parameters for controlling the 
usage of the vehicle. As shown in Figure 5, the memory 
60 of the chip card 12 can be programmed with a vali- 

20 dation code 61 for validating the chip card and a time 
parameter 62 for defining an operable period of the rent- 
al vehicle. Other information which can be programmed 
within the memory 60 of the chip 14 can include a grace 
period 63, details of the ownership 64 of the vehicle, de- 

25 tails of the current user 65 of the vehicle, and details 
regarding the rental contract 66, by way of example only. 
Other possible examples are pulse time parameters for 
audible and visual indicators. The memory 60 in the chip 
card 14 can also be used for recording information re- 

30 garding the usage of the vehicle including, for example, 
the distance driven 67, the speed (maximum and/or av- 
erage) 68 of the vehicle and the journey time 69, by way 
of example only. These usage characteristics will be 
stored on the chip card by the control unit 10 during op- 

35 e ration of the vehicle. 

[0036] Further details of the way in which the informa- 
tion described above is actually used, will be given in 
the following description of the use of the present appa- 
ratus. 

40 [0037] Figure 6 is a schematic overview of a compar- 
ison performed by a comparison unit 76 (which may be 
in the form of control code) contained within the memory 
44 for controlling the operation of the microprocessor 
42. In a preferred embodiment of the invention, at least 

45 selected data stored in the memory 60 of the chip card 
is read by the card reader 40 and is stored in the memory 
44 under control of the control code by the microproc- 
essor 42. Thus, for example, in Figure 6, the time period 
parameter 62 is read into a memory location 70 within 

50 the memory 44 as a rental period parameter. Also, the 
grace period 63 is read into a storage location 72 as a 
grace period parameter. A comparison unit 76 (which 
can be formed by a control code or, by a hardware com- 
parator) is operable to compare the rental period param- 

55 eter to real time as defined by a clock function 74 of the 
control unit 10. The clock function 74 can be a software 
function of the microprocessor, or could be configured 
as a separate hardware clock. The rental period param- 
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eter 70 can be defined in terms of a date and time at 
which the rental period expires, or could be defined as 
a duration from a start time (e.g., one day, one week, 
etc.). When the comparator function 76 determines that 
the rental period has ended, it then causes various ac- 
tions to be undertaken, as will be described in the fol- 
lowing. Optionally, following the end of the rental period, 
the comparator 76 can be responsive to a grace period 
72 for providing an additional grace period over and 
above the rental period, as will also be described in the 
following. 

[0038] Figure 7 is a flow diagram illustrating a mode 
of operation of the apparatus described with reference 
to Figures 1 -6. As shown in Figure 7, when power is sup- 
plied (step S1) to the control unit 10, logic is operable 
to increment an elapsed time count (step S2). The logic 
described with reference to Figure 7 can be implement- 
ed in the form of control code held in the memory 44 and 
operable to control the operation of the microprocessor 
42. 

[0039] In step S3, the logic is operable to test whether 
the start switch has been operated. If not, control passes 
back to step S2. 

[0040] If the start switch has been operated, then in 
step S4, a check is made whether the vehicle is already 
running. If the vehicle is not already running, then a 
check is made in step S5 that a valid validation device 
12 is present. This is achieved by reading and validating 
the validation code 61 from the memory 60 of the chip 
card 12. If a valid validation device is present, then op- 
eration of the vehicle is enabled in step S6. In step S7, 
configuration operating parameters which are pro- 
grammed into the memory 60 of the chip card 12 (in- 
cluding, but not only, the time parameter 62), are read 
into the memory 44 of the control unit 10. Control then 
passes to step S8. If, in step S4, the vehicle is deter- 
mined already to be running, then control passes direct- 
ly to step S8. In step S8, then comparator function 76 of 
Figure 6 is operable to determine whether the usage 
time as defined by the time parameter 62 and stored in 
the rental period location 70 has already expired. If not, 
control passes back to step S2. 

[0041] Alternatively, control then passes to step S9 
where grace time warnings can be effected. The grace 
warnings can be in the form of audible and/or visual 
warnings using the audio interface 50 and/or the display 
devices 48 referred to with reference to Figure 4. In step 
S10, a further check is made as to whether the grace 
period as defined by the grace period parameter 63 has 
expired. If not, control passes to step S2. 
[0042] If the grace time period has expired, then in 
step S11, a usage expired alarm is activated and the 
card is invalidated by overwriting or deleting the valida- 
tion code 61 on the card. Control then passes back to 
step S2. 

[0043] Returning to step S5, if a valid validation device 
is not present, then, in step S12, the operation of the 
vehicle is disabled. This can be effected by selectively 



disabling one or more of the ignition switch 22, the start- 
er circuit 28, the ignition circuit 24, the fuel pump and/ 
or any other control circuits of the vehicle which are pro- 
vided to enable selective disabling of that vehicle. In 

5 step S1 3, a check is made whether a validation device 
was previously present. If yes, then in step S1 4, the last 
stored parameter values of the most recent valid valida- 
tion device is retrieved from the memory 44 of the control 
unit 1 0. If there is no record of a validation device having 

10 previously been present in step S13, then in step S15, 
initial default parameter values are retrieved from the 
memory 44 of the control unit 10. In step S16, a test is 
made whether an appropriate alarm function has been 
selected. If an alarm function has been selected, then 

is the appropriate alarm is activated in step S1 7 according 
to the program parameters. The alarm function could be 
the activation of an audible alarm such as the horn 30, 
the activation of one or more lighting circuits 32, and/or 
the transmission of a radio location signal 38. If no alarm 

20 function has been selected in step S1 6, or following step 
S17, control passes back to step S2. 
[0044] It can thus be seen that an embodiment of the 
invention provides an intelligent programmable appara- 
tus for controlling the usage of a vehicle, with additional 

25 security features being programmable by means of a re- 
cordable data medium (such as a chip or smart card) 
containing the values of the parameters being pro- 
grammed into the card by means of a discrete computer. 
The parameters can include a maximum permitted time 

30 of vehicle usage and an additional "grace period - , after 
which the unit invalidates the card. Without the presence 
of a valid validation device in the control unit 1 0, the ve- 
hicle is rendered immobile and optionally various alarm 
functions can also be activated. As described above, the 

35 control unit can also store information regarding the us- 
age of the vehicle, such as times, distances and speeds. 
Optionally, various additional operating parameters for 
user convenience features may be programmed (e.g., 
settings for an air conditioning unit and/or other elec- 

40 tronic systems). Thus, an embodiment of the invention 
can provide an intelligent programmable apparatus for 
controlling the usage of a vehicle, while providing addi- 
tional security and optional user convenience features. 
[0045] The control unit can be implemented as a ve- 

45 hicle-mounted unit containing microprocessor-control- 
led timing functions and immobilising circuitry and 
equipped with a reader (or optionally a reader/writer) for 
removable data storage media such as a chip card 
(smart card, IC card, memory card), or a magnetic card, 

50 as well as optional alarm circuitry. A separate computer 
system allows programming of the data storage media 
with desired sets of operating parameter values for con- 
trolling timing, immobilisation of the vehicle and optional 
alarm functions, for transferral to the vehicle-mounted 

ss control unit. Additional data regarding vehicle usage 
may also be stored on the media, such as journey times 
and distances, fuel consumption and maximum speeds, 
by way of example only. 
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[0046] The apparatus may be optionally provided for 
additional user convenience features, such as allowing 
the storage of various electronically settable vehicle pa- 
rameters or for a vehicle to be started at predetermined 
times by the same apparatus. 

[0047] I n the absence of a valid data storage medium 
(e.g., a chip card), the apparatus has the ability to render 
the vehicle immobilised, and during this state, vehicle 
alarms may also be activated if attempts are made to 
operate the vehicle. Additionally, the unit may also acti- 
vate a beaconing device to aid location of the vehicle. 
Immobilisation may be achieved by various means com- 
monly in use, such as by disabling various parts of the 
vehicle's propulsion system by means of electrical 
switches (such as relays) or mechanical actuators, in a 
manner which will be well understood by a person skilled 
in the art. The immobilisation is controlled by the internal 
microprocessor, according to the parameters read in 
from a valid, programmed validation device (e.g., a pro- 
gram data storage medium). A newly-installed appara- 
tus, which has never been programmed by means of a 
smart card, will hold the vehicle immobile and will acti- 
vate alarm functions according to a set of initial default 
parameters contained within the apparatus, should at- 
tempts be made to operate the vehicle. The manner in 
which the vehicle immobilisation is effected ensures that 
immobilisation of the vehicle will not occur during actual 
use, but that immobilisation merely occurs following a 
period of use on the next attempt to restart the vehicle. 
[0048] As described above, the exemplary microproc- 
essor-based vehicle security and electronic system ap- 
paratus typically consists of a vehicle mounted control 
unit 10 with a card reader/writer, visual indicators such 
as one or more light emitting diodes (LEDs), audible in- 
dicators or sounders and relays. The immobilise func- 
tion uses the internal microprocessor to count down (e. 
g., step S2) the elapsed rental time (e.g., step S8) and 
following that, an optional grace period (e.g., step S1 7), 
before actually immobilising the vehicle. For safety rea- 
sons, as indicated above, the apparatus will not stop a 
vehicle while it is running. The elapsed rental time is 
counted continually (e.g., step S4) irrespective of wheth- 
er the vehicle is in operation or whether the validation 
device 12 is present or not. During the grace period, the 
audible and/or visual indicators can be activated (e.g., 
step S1 5). In the simple example where a LED 1 9 is pro- 
vided on the control unit, this can be caused to flash. 
Alternatively, or in addition, through the use of the audio 
interface 50 and the speaker 52, the control unit can be 
caused to "beep". These indications signal the end of 
the allowed usage period to the user. When the allowed 
rental time (and optionally the grace period) have both 
expired, any attempts to restart the vehicle will prove 
unsuccessful and, in accordance with programmed pa- 
rameters, can cause alarm indicators to be operated (e. 
g., steps S16 and S17). An example of such an alarm 
indicator can be flashing of the vehicle lights and pulsing 
of the vehicle's horn. The various timing parameters per- 



taining to the pulsing of the audible and visual indicators, 
vehicle horn and hazard lights, can alt be configurable 
according to preferences of the rental company and can 
be applied to the apparatus either via additional param- 
s eters stored within the memory 60 of the chip card and/ 
or be pre-programmed into the memory 44 (preferably 
into a non-volatile portion thereof) of the control unit 10. 
As indicated in Figure 7, in step S15, at least initial de- 
fault parameter values are pre-programmed into the 
10 memory 44 of the control unit 1 0. Additional and/or op- 
erating parameters can be stored in the memory 60 of 
the chip card 12 by means of software running on a dis- 
crete computer system (e.g., the computer system 16 
of Figure 1) provided with an appropriate media pro- 
fs g rammer. 

[0049] As described above, in a preferred embodi- 
ment of the invention, the control unit 10 is additionally 
operable to write information to the chip card 12, includ- 
ing the ability to overwrite and thus invalidate cards, pre- 

20 venting further usage of those cards (e.g., step S11). 
Attempts to operate the vehicle without the presence of 
a valid chip card will be prevented (e.g., step S1 2), again 
with the operation of alarms being activated (e.g., steps 
Sl6andS17). As described above, for newly-fitted units 

25 which have never been configured by means of a re- 
cordable media card, built in, factory set default param- 
eters (e.g., step S15) are used to control the immobili- 
sation and alarm functions. 

[0050] By means of the card recording functions, the 

30 chip card may also be used to record information about 
customer usage of the vehicle, such as the distance 
driven during the rental period, the maximum speed 
driven, and journey times, thus assisting in assuring 
compliance with rental control terms and local laws. 

35 [0051] After both the rental period and the grace pe- 
riod end, the unit monitors the state of the vehicle's ac- 
tivation switch (e.g., an ignition key). Once it detects that 
the vehicle is not operating (e.g., step S4), the control 
unit prevents attempts to restart the vehicle (e.g., step 

40 S12). As described above, this may be typically imple- 
mented by interrupting an ignition current or a fuel pump 
by means of relays, or interrupting motor supply current 
in electrically powered vehicles. Alarm functions (e.g., 
step S16/S17) may be activated, for example utilising 

45 relays to flash the vehicle's lights and intermittently 
sound the horn (where provided). Additionally, the con- 
trol unit 10 can also activate a radio beaconing device 
36, if fitted, to assist in location of the vehicle. Both the 
rental and grace periods are programmed by the vehicle 

50 rental company into the recordable medium (e.g., the 
chip card 12) by means of software running on the com- 
puter 16 fitted with the suitable media reader/writer. 
Each recordable card can be programmed with unique 
identification and validation codes at the commence- 

55 nrtent of the rental period. The identification information 
can typically include ownership (e.g., the rental compa- 
ny), user and contract identification data. The identifica- 
tion and validation codes are verifiable by the control 
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unit 10 to prevent another card or an expired card being 
accepted by that control unit during the rental period. In 
addition, the vehicle rental company could have pre-pro- 
grammed cards for internal use, allowing the rental com- 
pany to override any unit's current parameters on a tem- 
porary basis, providing unrestricted uses of the vehicle 
for various purposes, such as routine maintenance. 
[0052] For vehicles equipped with relevant electroni- 
cally-controlled propulsion, environmental and enter- 
tainment systems, it is possible to extend the function- 
ality to provide for rental customers* preferences regard- 
ing various mechanical and environmental parameters 
by programming such parameters into the chip cards. 
Any changes in customer preferences could be saved 
by customers on individual cards and then stored in the 
rental company's computer system for future use by the 
customer. Examples of possible operation would be to 
enable automatic starting of the vehicle at predeter- 
mined times in readiness for journeys or to keep vehi- 
cles in optimal functional condition white in storage, and 
storing of driver and passenger seat positions, climate 
control settings and/or radio station presets. 
[0053] Thus, there has been described a control unit 
for controlling the usage of apparatus over a time period 
is configured to receive a validation device programma- 
ble with programmable parameters, including a valida- 
tion code and a time parameter. The control unit is op- 
erable to respond to the validation code to validate the 
validation device for enabling operation of the apparatus 
and to respond to the time parameter of the validation 
device to cause disabling of the apparatus at a time de- 
termined by the time parameter. The invention finds par- 
ticular application to the control of a vehicle during a 
rental period, the control unit being responsive to a time 
parameter to immobilise the vehicle following the end of 
the rental period. A grace period following the end of the 
rental period may also be programmed into the valida- 
tion device. For safety reasons, the immobilisation of the 
vehicle is prevented while the vehicle is operating, but 
restarting of the vehicle is prevented on the first and sub- 
sequent occasions following the expiry of the appropri- 
ate time period. Additional parameters may be pro- 
grammed into the validation device, which can be in the 
form of a chip card or other recordable medium. 
[0054] Although a particular embodiment has been 
described in the foregoing, it will be appreciated that 
many additions and/or modifications may be made with- 
in the scope of the present invention. 
[0055] Thus, for example, although reference has 
been made specifically to the usage of a vehicle, it 
should be understood that the present invention may be 
used to control the use of any controllable device which 
may be supplied for use for a predetermined period, in- 
cluding, for example, equipment rented by a plant or tool 
hire company, or other application where control over 
the temporary usage of a piece of equipment is desired. 
Thus, it is envisaged that a control unit may be a control 
unit connectable to operating components of an appa- 



ratus for controlling usage of that apparatus, the control 
unit being configured to receive a validation device pro- 
grammable with programmable parameters including a 
validation code and a time parameter, the control unit 

s being operable to respond to the validation code to val- 
idate the validation device for enabling operation of the 
apparatus and to respond to the time parameter of the 
validation device to cause disabling of the apparatus at 
a time determined by the time parameter. 

10 [0056] Although reference has been made to the use 
of a chip card as a validation device, alternative valida- 
tion devices may be used, including, for example, a 
magnetic card or indeed any other medium which is ca- 
pable of transferring data from a rental company's com- 

rs puter to a vehicle usage control unit 10, such that the 
data may be received and processed by the control unit 
10. 

[0057] Also, although a microprocessor-based sys- 
tem has been described, it will be appreciated that the 

20 functionality of the control unit 1 0 could be implemented 
by means of special purpose hardware such as, for ex- 
ample, one or more programmable circuits such as dis- 
crete timers, or logic integrated circuits or application 
specific integrated circuits (ASICs). 

25 [0058] Accordingly, it will be appreciated that the par- 
ticular example described herein is intended to be illus- 
trative only, and not limitative. 



1. Vehicle usage control apparatus comprising a con- 
trol unit connectable to operating components of the 
vehicle, the control unit being configured to receive 

35 a validation device programmable with programma- 
ble parameters including a validation code and a 
time parameter, the control unit being operable to 
respond to the validation code to validate the vali- 
dation device for enabling operation of the vehicle 

40 and to respond to the time parameter of the valida- 
tion device to cause immobilisation of the vehicle at 
a time determined by the time parameter 

2. Vehicle usage control apparatus according to claim 
45 1 , wherein the time parameter defines the end of a 

rental period, the control unit being responsive to 
the time parameter to immobilise the vehicle follow- 
ing the end of the rental period. 

50 3. Vehicle usage control apparatus according to claim 
2, wherein the control unit is operable to immobilise 
the vehicle at the first attempt to start the vehicle 
following the end of the of the rental period. 

55 4. Vehicle usage control apparatus according to claim 
2, wherein the control unit is operable to immobilise 
the vehicle after a grace period following the end of 
the rental period. 
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5. Vehicle usage control apparatus according to claim 
4, wherein the validation device is programmable 
with a grace period parameter defining the grace 
period, the control unit being operable to read the 
grace period parameter from the validation device. 

6. Vehicle usage control apparatus according to any 
preceding claim, wherein the control unit is opera- 
ble to warn a user of the impending expiry of a time 
period. 

7. Vehicle usage control apparatus according to any 
preceding claim, wherein the control unit is opera- 
ble at the time determined by the time parameter to 
invalidate a validation device received by the con- 
trol unit by overwriting the validation code of the val- 
idation device. 

8. Vehicle usage control apparatus according to any 
preceding claim, wherein the control unit is further 
operable to activate an alarm device at a time de- 
termined by the time parameter. 

9. Vehicle usage control apparatus according to claim 
8, wherein the alarm device comprises an audible 
and/or visible alarm device. 

1 0. Vehicle usage control apparatus according to claim 
8 or claim 9, wherein the alarm device comprises a 



a magnetic area on the card. 

16. Vehicle usage control apparatus according to any 
preceding claim, wherein the control unit is opera- 

s ble to record usage parameters on the validation 
device. 

17. Vehicle usage control apparatus according to claim 
16, wherein the usage parameters include at least 

10 one of distance driven, maximum speed and jour- 
ney time parameters. 

18. Vehicle usage control apparatus according to any 
preceding claim, further comprising a said valida- 

15 tion device. 

19. Vehicle usage control apparatus according to claim 
18, wherein the validation device comprises a re- 
cordable medium. 

20 

20. Vehicle usage control apparatus according to claim 
18 or claim 19, wherein the validation device is a 
chip card. 

25 21. Vehicle usage control apparatus according to any 
preceding claim wherein the validation device is 
programmable with additional programmed param- 
eters. 

22. Vehicle usage control apparatus according to claim 
21 , wherein the additional programmed parameters 
include at least one of vehicle ownership, current 
user, usage contract and user preference parame- 



23. A validation device for vehicle usage control appa- 
ratus system according to any preceding claim, the 
validation device holding at least a validation code 
and a time parameter readable by the control unit. 

24. A validation device according to claim 23, compris- 
ing a recordable medium. 

25. A validation device according to claim 23 or claim 
24, wherein the validation device is a chip card. 

26. A validation device according to any one of claims 
23 to 25, programmable with additional pro- 
grammed parameters. 

27. A validation device according to claim 26, wherein 
the additional programmed parameters include at 
least one of vehicle ownership, current user, usage 
contract and user preference parameters. 

28. A control unit connectable to operating components 
of an apparatus for controlling usage of that appa- 
ratus, the control unit being configured to receive a 



radio location beacon. 30 

11. Vehicle usage control apparatus according to any 
preceding claim, wherein the control unit is mount- 
able in a vehicle for connection to vehicle systems. 

35 

12. Vehicle usage control apparatus according to claim 
1 1 , wherein the control unit is connectable to a start- 
er of a vehicle for enabling and disabling operation 
of the vehicle by respectively enabling and disabling 

the starter. 40 

13. Vehicle usage control apparatus according to claim 
11 or claim 12, wherein the control unit connectable 
to the ignition system of a vehicle for enabling and 
disabling operation of the vehicle by respectively 45 
enabling and disabling the ignition system of the ve- 
hicle. 

14. Vehicle usage control apparatus according to any 
preceding claim, wherein the control unit is config- 50 
ured to receive a validation device in the form of a 
chip card and comprises means for reading a chip 
card. 

15. Vehicle usage control apparatus according to any 55 
one of claims 1 to 1 4, wherein the control unit is con- 
figured to receive a validation device in the form of 

a magnetic card and comprises means for reading 
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validation device programmable with programma- 
ble parameters including a validation code and a 
time parameter, the control unit being operable to 
respond to the validation code to validate the vali- 
dation device for enabling operation of the appara- s 
tus and to respond to the time parameter of the val- 
idation device to cause disabling of the apparatus 
at a time determined by the time parameter. 

29. A vehicle comprising vehicle usage control appara- 10 
tus according to any one of claims 1 to 22. 

30. A method of controlling the usage of a rental vehi- 
cle, comprising: 

15 

initially programming a validation device with at 
least a validation code and a time parameter 
and associating the validation device with a ve- 
hicle usage control unit; and then 
the control unit reading the validation code and 20 
the time parameter from the validation device, 
enabling operation of the vehicle where the val- 
idation code is valid, and subsequently disa- 
bling operation of the vehicle at a time depend- 
ent upon the time parameter. 25 

31. A method according to claim 30, where the disa- 
bling of the vehicle is effected by the control unit 
cancelling the validation code. 

30 
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